User
A customer login.
OBJECTThe User objectA customer login.POSTCreate a user
/users · Create a customer loginGETThe current user/users/mePOSTCreate a scoped API key and return its secret once/users/me/api-keysGETList API key metadata; secrets are never returned/users/me/api-keysPOSTGrant explicit revocable field, purpose, account and time-bounded third-party direction after fresh authentication and ownership proof/users/me/data-consents · Own active customer session, bank-verified customer binding, customer scope and authentication within five minutes requiredGETList own third-party directions and revocations/users/me/data-consents · Own active customer session onlyPUTChange the password (revokes other sessions)/users/me/passwordPUTSet the transaction PIN/users/me/pinPOSTBind a login to a verified customer using bank enrolment evidence/users/{id}/customer-bindingDELETERevoke an API key; existing access tokens expire within 60 seconds/users/me/api-keys/{id}POSTAtomically revoke an API key and issue its replacement/users/me/api-keys/{id}/rotationsPOSTRevoke own consumer direction; outstanding tokens must fail subsequent online data checks/users/me/data-consents/{consent}/revocations · Own active customer session and reason required; repeat revocation is harmless